CVE-2007-3368

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-06-22 · updated 2026-06-16

Description

Buffer overflow in the HTTP server on the Polycom SoundPoint IP 601 SIP phone with BootROM 3.0.x+ allows remote attackers to cause a denial of service (device reboot) via a malformed CGI parameter.

Affected products

Polycom Soundpoint Ip 650: bootrom_3.0.0

References

http://osvdb.org/37611
http://www.polycom.com/common/documents/support/downloads/voice/soundpoint_ip_soundstation_ip_sip_2.1.1_release_notes.pdf
http://www.securityfocus.com/bid/24547
http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=273&
http://osvdb.org/37611
http://www.polycom.com/common/documents/support/downloads/voice/soundpoint_ip_soundstation_ip_sip_2.1.1_release_notes.pdf
http://www.securityfocus.com/bid/24547
http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=273&

Get alerted when CVE-2007-3368 or the next vulnerability affects your stack